Skip to content
Sign in

Bug bounty program

XV

XVIDEOS

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
5
Disclosed reports
13

Most upvoted reports13

All reports
Most upvoted reports of XVIDEOS
ReportWeaknessDisclosedBountyVotes
Open redirect#2957962Open Redirect2025-02-06–143
Lack of Rate Limiting on Account Creation Endpoint#2915502No weakness recorded2025-01-16$200110
Stored XSS via SMTP Error Message#2956266Cross-site Scripting2025-01-24$25086
Enable 2FA without verifying the email#3016540Access Control2025-05-09–70
No-Rate limit of current password on delete account endpoint(https://www.xvideos.com/account/close)#1392287No weakness recorded2021-11-23$10067
Error Page Content Spoofing or Text Injection#2968559Misconfiguration and Insecure Design2025-02-06–46
Unauthenticated API Access Exposing Premium Content and Financial Data#2979176Information Disclosure2025-02-09–46
Error Page Content Spoofing or Text Injection#2979148Misconfiguration and Insecure Design2025-02-07–37
Script breaking tag (Forces website to render blank) (Informative)#1355537Other weaknesses2021-10-23$15036
API Data Leakage Vulnerability Report - `xvcams.com`#2979153Information Disclosure2025-02-09–33

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in